Inhandnetworks Ir912l-fq58 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Inhandnetworks Ir912l-fq58 Firmware: 5 record(s), with affected versions and fixes.cpe:2.3:o:inhandnetworks:ir912l-fq58_firmware
CVE-2026-38718
High · 7.5
CWE-120 Jun 18, 2026
Classic Buffer Overflow in Inhandnetworks Ir915l-fq39-s Firmware
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a buffer overflow vulnerability in the device registration function. This vulnerability could allow an attacker to cause a denial of service attack on the remote target device.
CVE-2026-38717
Critical · 9.8
CWE-77 Jun 18, 2026
InHand Networks IR912/IR915 routers: root command injection via file upload
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the file upload function. The vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
CVE-2026-38716
Critical · 9.8
CWE-77 Jun 18, 2026
InHand Networks IR912 and IR915 Routers: Command Injection in Python App Export
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python application export function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
CVE-2026-38715
Critical · 9.8
CWE-77 Jun 18, 2026
InHand Networks IR912/IR915 Routers: Root Command Injection in Log Viewing Function
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the log viewing function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
CVE-2026-38714
Critical · 9.8
CWE-77 Jun 18, 2026
InHand Networks IR912/IR915 routers: command injection in Python configuration function
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python configuration function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.